PT-2023-18219 · Google · Android

Emrah Demir · Published 2023-02-09 · Updated 2023-02-17 · CVE-2023-21451

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android versions prior to S(12)

Description A Stack-based overflow issue in IpcRxEmbmsSessionList in SECRIL allows an attacker to cause memory corruptions.

Recommendations For versions prior to Android S(12), update to Android S(12) or later to resolve the issue.

Fix

RCE

Memory Corruption

Weakness Enumeration

CWE-20

CWE-787

Related Identifiers

CVE-2023-21451

Affected Products

Android

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-21451 · Security Note
• https://osv.dev/vulnerability/CVE-2023-21451 · Vendor Advisory
• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=04 · Vendor Advisory